ClawHub

Shadows Skill Factory

v1.1.0

Meta-skill for creating new agent skills — generates well-structured SKILL.md files with proper frontmatter, triggers, protocols, and rules. Use when buildin...

⭐ 0· 254·2 current·2 all-time
by@nakedoshadow
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name and description (skill-generation/meta-skill) align with the content of SKILL.md: it produces SKILL.md frontmatter and body, asks interview questions, and defines a validation/test flow. No unexpected env vars, binaries, or installs are requested.
ℹ
Instruction Scope
The SKILL.md stays within the scope of producing skill files and validation guidance. One minor inconsistency: the file claims 'does not ... modify existing files', yet the 'Save and Test' step shows commands (mkdir -p, save SKILL.md) that would create/write files on disk; this is expected for a skill authoring workflow but is a contradiction in the document that the user should be aware of. Otherwise, the instructions do not request unrelated system secrets or network calls.
✓
Install Mechanism
No install spec is present (instruction-only skill). This is the lowest-risk configuration; nothing will be downloaded or written by an installer.
✓
Credentials
No environment variables, credentials, or config paths are required. The guidance explicitly recommends only declaring env vars when necessary for generated skills.
✓
Persistence & Privilege
always is false and there is no self-installing behavior. The skill does not request persistent privileges or modification of other skills' configurations. It merely produces text that the agent/user can save; saving files is optional and under the user's control.
Assessment
This skill is coherent for creating SKILL.md documents. Before you save or publish any generated SKILL.md: review the generated content for accidental inclusion of sensitive information (API keys, passwords, or environment variables), inspect any shell commands the generated skill might run, and manually approve any file writes or registry publishes. Note the minor contradiction in the SKILL.md: it says the skill doesn't modify files but also shows a 'Save and Test' step that creates/writes files—treat file-writing as deliberate user action and review before executing. If you plan to publish generated skills to a registry, verify homepage URLs and metadata to avoid exposing secrets or unintended automation triggers.

Like a lobster shell, security has layers — review code before you run it.

latestvk970mjdwymjxdmh9xantg0k7zx82fzmc

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🏭 Clawdis
OSmacOS · Linux · Windows

Comments